Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430303a613163303a36343a3a2f34382d3438203d3e203633343230.roa
File:                     323430303a613163303a36343a3a2f34382d3438203d3e203633343230.roa (raw, json)
Hash identifier:          SIDzkdHaD4T5s1mKvgY3W5rUNX/DJz0sp/mCPv9ZWMk=
Subject key identifier:   34:7C:E6:3E:E2:8F:A5:31:4E:29:43:6D:33:D5:DD:42:C9:D3:42:DB
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       4F31F839993817DEC4D057FD1E94A5724086483E
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430303a613163303a36343a3a2f34382d3438203d3e203633343230.roa
Signing time:             Fri 26 Jun 2026 15:05:00 +0000
ROA not before:           Fri 26 Jun 2026 15:00:00 +0000
ROA not after:            Fri 25 Jun 2027 15:05:00 +0000
asID:                     63420
IP address blocks:        2400:a1c0:64::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 02:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:31:f8:39:99:38:17:de:c4:d0:57:fd:1e:94:a5:72:40:86:48:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Jun 26 15:00:00 2026 GMT
            Not After : Jun 25 15:05:00 2027 GMT
        Subject: CN=347CE63EE28FA5314E29436D33D5DD42C9D342DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:d2:4a:7c:97:51:75:99:d1:a7:5f:09:44:
                    9b:e9:7f:4b:39:70:bd:fa:9d:af:c1:f0:f9:e7:99:
                    28:09:21:0b:5d:f6:48:b7:a3:60:37:c3:37:a0:af:
                    91:b1:95:f5:6d:1d:23:83:06:21:cd:fb:a5:a2:01:
                    2d:5b:39:47:d6:37:38:6e:a5:0b:f4:0c:3f:1b:ba:
                    05:e2:d1:6d:0b:01:0c:8a:0c:70:34:29:5c:23:2e:
                    72:49:21:3a:60:1c:62:83:59:db:f3:21:94:a0:00:
                    2d:ca:f7:42:92:3a:97:0b:81:04:bc:ff:3e:d5:f5:
                    59:3c:c7:0a:24:9a:c7:f6:1e:76:2d:e0:61:b4:f9:
                    77:c8:55:21:4d:7f:60:e5:42:dc:6d:b2:e0:ce:ad:
                    c0:af:72:5c:46:08:3a:9f:58:1c:00:f4:ee:da:6a:
                    ec:df:ac:5d:05:83:7c:26:b8:d0:ad:84:cb:32:24:
                    c8:0d:ea:9e:41:10:de:b5:2a:e3:54:29:6e:f0:75:
                    99:c6:55:2d:8a:83:0f:fa:cd:f1:54:13:bd:5a:4f:
                    56:dd:8a:26:fc:5a:66:17:9d:15:13:25:ab:21:ff:
                    5f:e8:a7:b0:23:c3:b9:18:ad:e4:f6:af:e3:66:ef:
                    66:ff:a2:13:2d:38:a5:3c:d6:ae:12:1f:d8:2a:f1:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7C:E6:3E:E2:8F:A5:31:4E:29:43:6D:33:D5:DD:42:C9:D3:42:DB
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430303a613163303a36343a3a2f34382d3438203d3e203633343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:a1c0:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:85:a0:98:15:19:70:70:a8:73:d4:b1:cc:25:ff:15:66:44:
         a7:f8:ad:60:75:70:a9:15:9b:d5:8e:16:3a:29:49:18:ac:7d:
         d3:b2:3b:4d:5e:f1:35:b6:e8:6d:d2:5d:84:8d:21:7e:2f:16:
         29:56:3b:c7:cc:45:d7:bd:09:c7:4a:71:8c:1b:65:5c:06:b3:
         82:18:21:88:39:5e:eb:6f:fc:98:68:fc:91:64:a6:06:0c:16:
         60:10:4e:9b:cf:56:c7:31:09:9b:80:d9:34:f9:69:75:7d:cd:
         9a:a5:31:18:19:1f:8f:5d:3e:2f:e3:a1:4f:36:99:3b:3e:39:
         26:a3:41:d2:be:39:19:08:c5:bd:28:66:56:eb:7c:3d:6b:b5:
         6e:2d:e1:89:62:4c:cb:9d:bf:47:b1:11:14:47:83:a0:c9:44:
         e8:c9:4e:f5:fa:8a:d8:3d:f8:4f:cd:66:da:a5:14:25:21:22:
         82:c3:fe:dd:a9:84:e4:e8:0c:5a:36:5e:83:7f:74:d7:5f:5b:
         ae:b6:01:54:44:c8:61:6f:dd:c2:9b:de:dc:30:f6:bb:43:b0:
         38:48:a9:f9:e5:36:8d:54:81:32:d7:a0:43:d1:e6:83:35:8e:
         ab:45:e5:cb:f5:8d:8f:98:ad:26:5e:b1:f4:48:92:7d:d7:ef:
         a9:68:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:45:43 2026 by rpki-client